Security

Accelerating TLS Handshakes using Private Key Provider in Envoy

API Key Authentication

Backend Mutual TLS: Gateway to Backend

Backend TLS: Gateway to Backend

Backend TLS: Skip TLS Verification

Basic Authentication

CORS

Credential Injection

External Authorization

HTTP Header and Method Based Authorization

Configure request authorization using HTTP headers and HTTP methods with SecurityPolicy.

IP Allowlist/Denylist

JWT Authentication

JWT Claim-Based Authorization

Mutual TLS: External Clients to the Gateway

OIDC Authentication

Secure Gateways

Threat Model

TLS Passthrough

TLS Termination for TCP

Using cert-manager For TLS Termination